{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:UJNDOU3MEMDEQIYE3WZRHRDDCB","short_pith_number":"pith:UJNDOU3M","canonical_record":{"source":{"id":"2407.02747","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-03T01:47:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2759abcb67485def502a4570d7b01f03f2952cda289265f782e99fd02c7062d8","abstract_canon_sha256":"1f72fa6cec43a50e6fd1c4c84e470be1da8f6ef6f2f19fd573a1ba6e84093028"},"schema_version":"1.0"},"canonical_sha256":"a25a37536c2306482304ddb313c463106192dca9e41c32ba7b6a0da574f893ac","source":{"kind":"arxiv","id":"2407.02747","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.02747","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"arxiv_version","alias_value":"2407.02747v1","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.02747","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"pith_short_12","alias_value":"UJNDOU3MEMDE","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"pith_short_16","alias_value":"UJNDOU3MEMDEQIYE","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"pith_short_8","alias_value":"UJNDOU3M","created_at":"2026-07-05T08:39:41Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:UJNDOU3MEMDEQIYE3WZRHRDDCB","target":"record","payload":{"canonical_record":{"source":{"id":"2407.02747","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-03T01:47:46Z","cross_cats_sorted":["cs.CR"],"title_canon_sha256":"2759abcb67485def502a4570d7b01f03f2952cda289265f782e99fd02c7062d8","abstract_canon_sha256":"1f72fa6cec43a50e6fd1c4c84e470be1da8f6ef6f2f19fd573a1ba6e84093028"},"schema_version":"1.0"},"canonical_sha256":"a25a37536c2306482304ddb313c463106192dca9e41c32ba7b6a0da574f893ac","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:39:41.054426Z","signature_b64":"UEGhkbzsZDcIpOuuiS4/K1IDqsCff4ZeUS1E4tvEdNy5/oQWtl9wdVI4grhOci/eoXeS/kdAOn8KAezEFN9+AQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"a25a37536c2306482304ddb313c463106192dca9e41c32ba7b6a0da574f893ac","last_reissued_at":"2026-07-05T08:39:41.054012Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:39:41.054012Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2407.02747","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:39:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"nBZVcrWtGRkRAkgSGQ4cH+AMyDXI63NmjiBTDGdvsCVx97fNE4N/cLBuOMp50ww309Xwq3ixjHsEp1Go1y11Dw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:29:28.948064Z"},"content_sha256":"e20049d1c4ded35a050f82802df0e8c76ca2ee7fa9a32b989539617b05c7f38c","schema_version":"1.0","event_id":"sha256:e20049d1c4ded35a050f82802df0e8c76ca2ee7fa9a32b989539617b05c7f38c"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:UJNDOU3MEMDEQIYE3WZRHRDDCB","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","headline":"","cross_cats":["cs.CR"],"primary_cat":"cs.LG","authors_text":"Deepak Ravikumar, Efstathia Soufleri, Kaushik Roy","submitted_at":"2024-07-03T01:47:46Z","abstract_excerpt":"In this paper, we explore the properties of loss curvature with respect to input data in deep neural networks. Curvature of loss with respect to input (termed input loss curvature) is the trace of the Hessian of the loss with respect to the input. We investigate how input loss curvature varies between train and test sets, and its implications for train-test distinguishability. We develop a theoretical framework that derives an upper bound on the train-test distinguishability based on privacy and the size of the training set. This novel insight fuels the development of a new black box membershi"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.02747","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2407.02747/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:39:41Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WoEjY1QnUQ4lAykEAd3kJEoF+xRUmx5S+K/A9AINi36EaUlageji1S1Djjxuasq7XqxIf8Tl6T0PshhwQ1+eBg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-10T11:29:28.948962Z"},"content_sha256":"8c68743f34c7a92d98f1335d85b1162054d36e1f22ce8d991f3f99b9d8ae2822","schema_version":"1.0","event_id":"sha256:8c68743f34c7a92d98f1335d85b1162054d36e1f22ce8d991f3f99b9d8ae2822"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB/bundle.json","state_url":"https://pith.science/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-10T11:29:28Z","links":{"resolver":"https://pith.science/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB","bundle":"https://pith.science/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB/bundle.json","state":"https://pith.science/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB/state.json","well_known_bundle":"https://pith.science/.well-known/pith/UJNDOU3MEMDEQIYE3WZRHRDDCB/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:UJNDOU3MEMDEQIYE3WZRHRDDCB","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"1f72fa6cec43a50e6fd1c4c84e470be1da8f6ef6f2f19fd573a1ba6e84093028","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-03T01:47:46Z","title_canon_sha256":"2759abcb67485def502a4570d7b01f03f2952cda289265f782e99fd02c7062d8"},"schema_version":"1.0","source":{"id":"2407.02747","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2407.02747","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"arxiv_version","alias_value":"2407.02747v1","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2407.02747","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"pith_short_12","alias_value":"UJNDOU3MEMDE","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"pith_short_16","alias_value":"UJNDOU3MEMDEQIYE","created_at":"2026-07-05T08:39:41Z"},{"alias_kind":"pith_short_8","alias_value":"UJNDOU3M","created_at":"2026-07-05T08:39:41Z"}],"graph_snapshots":[{"event_id":"sha256:8c68743f34c7a92d98f1335d85b1162054d36e1f22ce8d991f3f99b9d8ae2822","target":"graph","created_at":"2026-07-05T08:39:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2407.02747/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"In this paper, we explore the properties of loss curvature with respect to input data in deep neural networks. Curvature of loss with respect to input (termed input loss curvature) is the trace of the Hessian of the loss with respect to the input. We investigate how input loss curvature varies between train and test sets, and its implications for train-test distinguishability. We develop a theoretical framework that derives an upper bound on the train-test distinguishability based on privacy and the size of the training set. This novel insight fuels the development of a new black box membershi","authors_text":"Deepak Ravikumar, Efstathia Soufleri, Kaushik Roy","cross_cats":["cs.CR"],"headline":"","license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-03T01:47:46Z","title":"Curvature Clues: Decoding Deep Learning Privacy with Input Loss Curvature"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2407.02747","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:e20049d1c4ded35a050f82802df0e8c76ca2ee7fa9a32b989539617b05c7f38c","target":"record","created_at":"2026-07-05T08:39:41Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"1f72fa6cec43a50e6fd1c4c84e470be1da8f6ef6f2f19fd573a1ba6e84093028","cross_cats_sorted":["cs.CR"],"license":"http://creativecommons.org/licenses/by-nc-nd/4.0/","primary_cat":"cs.LG","submitted_at":"2024-07-03T01:47:46Z","title_canon_sha256":"2759abcb67485def502a4570d7b01f03f2952cda289265f782e99fd02c7062d8"},"schema_version":"1.0","source":{"id":"2407.02747","kind":"arxiv","version":1}},"canonical_sha256":"a25a37536c2306482304ddb313c463106192dca9e41c32ba7b6a0da574f893ac","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"a25a37536c2306482304ddb313c463106192dca9e41c32ba7b6a0da574f893ac","first_computed_at":"2026-07-05T08:39:41.054012Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:39:41.054012Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"UEGhkbzsZDcIpOuuiS4/K1IDqsCff4ZeUS1E4tvEdNy5/oQWtl9wdVI4grhOci/eoXeS/kdAOn8KAezEFN9+AQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:39:41.054426Z","signed_message":"canonical_sha256_bytes"},"source_id":"2407.02747","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:e20049d1c4ded35a050f82802df0e8c76ca2ee7fa9a32b989539617b05c7f38c","sha256:8c68743f34c7a92d98f1335d85b1162054d36e1f22ce8d991f3f99b9d8ae2822"],"state_sha256":"e8533dc4142342e6a9e746b9bcf748045d48633d70f244e5269a334b04c3acc9"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"Rwr2Ig06Cy0OhRlmPyWiBcSERQ1ilqFZtNDnA9rpMuqEh6uhopw20eHDMXfAH1Ajgv6sa1xdIlbe4Z7uf94mDg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-10T11:29:28.955760Z","bundle_sha256":"720bfae3b29e87ece2930812c1e9d1f79bfa626c902012f993f2fec7a988c83e"}}